Browse CVEs

HIGH 8.8 CVE-2023-53971 WebTareas 2.4 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the chat photo upload functi… Webtareas No fix yet Fix from $1,9502025-12-22 HIGH 7.5 CVE-2023-53972 WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate databas… Webtareas No fix yet Fix from $1,9502025-12-22 MEDIUM 5.4 CVE-2022-44960 webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /general/search.php?searchtype=simple. This vul… Webtareas No fix yet Fix from $1,6002022-12-02 MEDIUM 5.4 CVE-2022-44961 webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /forums/editforum.php. This vulnerability allow… Webtareas No fix yet Fix from $1,6002022-12-02 MEDIUM 5.4 CVE-2022-44962 webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /calendar/viewcalendar.php. This vulnerability … Webtareas No fix yet Fix from $1,6002022-12-02 MEDIUM 5.4 CVE-2022-44953 webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /linkedcontent/listfiles.php. This vulnerabilit… Webtareas No fix yet Fix from $1,6002022-12-02 MEDIUM 5.4 CVE-2022-44954 webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /contacts/listcontacts.php. This vulnerability … Webtareas No fix yet Fix from $1,6002022-12-02 MEDIUM 5.4 CVE-2022-44955 webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the Chat function. This vulnerability allows attackers to exe… Webtareas No fix yet Fix from $1,6002022-12-02 MEDIUM 5.4 CVE-2022-44956 webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /projects/listprojects.php. This vulnerability … Webtareas No fix yet Fix from $1,6002022-12-02 MEDIUM 5.4 CVE-2022-44957 webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /clients/listclients.php. This vulnerability al… Webtareas No fix yet Fix from $1,6002022-12-02 MEDIUM 5.4 CVE-2022-44959 webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /meetings/listmeetings.php. This vulnerability … Webtareas No fix yet Fix from $1,6002022-12-02 CRITICAL 9.8 CVE-2022-44290 webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php. Webtareas Mitigation only Fix from $2,3002022-12-02 CRITICAL 9.8 CVE-2022-44291 webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php. Webtareas Mitigation only Fix from $2,3002022-12-02 MEDIUM 5.4 CVE-2021-36608 Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php. Webtareas No fix yet Fix from $1,6002022-06-16 MEDIUM 5.4 CVE-2021-36609 Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php. Webtareas No fix yet Fix from $1,6002022-06-16 MEDIUM 6.5 CVE-2020-23069 Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a malicious user read arbitrary fi… Webtareas No fix yet Fix from $1,6002021-08-18 MEDIUM 5.4 CVE-2020-23660 webTareas v2.1 is affected by Cross Site Scripting (XSS) on "Search." Webtareas No fix yet Fix from $1,6002020-08-26 MEDIUM 6.1 CVE-2020-14973 The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting (XSS) vulnerability via the query… Webtareas No fix yet Fix from $1,6002020-06-22